added CORS comments to README